HAProxy is a open source, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for web sites crawling under very high loads while needing persistence or Layer7 processing.

learn more… | top users | synonyms

0
votes
1answer
63 views

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of ip addresses that I want to use to help determine to right actions to take with HAProxy. So if haproxy loads whitelists like this. "acl whitelist src -f ...
0
votes
1answer
158 views

HAProxy SSL with new GoDaddy certs

I renewed my certificate from GoDaddy and I got back two files: gd_bundle-g2-g1.crt 27ec89cfaa7c28.crt I have the private.key. However I totally forgot how to use, or produce, a valid .pem file to ...
0
votes
1answer
105 views

Using SHA256 with SSL certificates in HAProxy

Through an article on Security Labs I read about Google deprecating SHA-1 as signature in Chrome next year. Now I want to edit our HAProxy SSL configuration to fit the new security needs. What are ...
1
vote
1answer
292 views

Proxy over redis, HAProxy or twemproxy?

The best way to hide switching of master/slave redis servers, is to use a proxy over master server. Among proxy candidates, there is two more important (and used) choices: twemproxy and ...
3
votes
0answers
180 views

Configure haproxy to return a 204 for a certain ACL match

I want to return a HTTP 204 error code if anyone tries to access a particular path on my web server. I could set one of my webservers to return a 204 error and point haproxy to it as a backend. ...
0
votes
1answer
158 views

HAProxy route https SNI and http over the same port

I have an HAProxy routing HTTPS without termination using SNI. The configuration is similar to the following: frontend ft_ssl_vip bind 0.0.0.0:5000 mode tcp option tcplog tcp-request ...
0
votes
1answer
313 views

Will this HAProxy “restart script” work as gracefully I think it will?

I put this script together from various places. What I am hoping is that it will do the following once run: Pause all "NEW" http traffic for ports 80 and 443 - just "pause" them, don't give any ...
0
votes
1answer
46 views

How to do haproxy session mapping

I have a scenario where i have two tomcat servers A and B behind the haproxy, now one of the app servers have a new version of the war and the other tomcat has a old version of the war file.So at a ...
0
votes
2answers
47 views

Web proxying with 3rd party authentication

I have a typical website where users have to pay to sign up and access some premium content. This content are internal propietary web servers from different vendors (think of it like graphical ...
1
vote
2answers
250 views

HAProxy tuning - can't support > 50 concurrent users

I'm investigating replacing a proprietary, software load balancer with HAProxy. As part of this investigation, I am attempting to test HAProxy under load. While my HAProxy configuration works fine ...
1
vote
1answer
231 views

How can I use environment variables in haproxy.conf

My haproxy.cfg file has one backend servers using hostnames: backend servers server myapp ${PORTAL_PORT_3000_TCP_ADDR}:${PORTAL_PORT_3000_TCP_PORT} maxconn 32 myapp is running in other docker ...
1
vote
2answers
332 views

How to construct a MongoDB Health Check in HAProxy?

There is a fastcgi example of a binary health check on the HAProxy blog. How would I construct a similar check for MongoDB such that I am doing a more robust health check for MongoDB - one that ...
1
vote
0answers
87 views

Configuring HAProxy for RPC, only one host

I've tried several ideas on how to get this to work, including Squid, Pound, and now HAProxy, which seems to be the closest yet, so far. I have an NGinx server which I have set to be the primary web ...
3
votes
1answer
440 views

Best Practice for Mapping Domain Names to Docker Container

What is considered "best practices" for serving a a docker container from a specific domain name? For example: Container1 runs App A on port 8080, and accessed via AwesomeAppA.com Container2 runs ...
0
votes
1answer
75 views

Multiple Proxy servers - and how to get around non-SNI devices?

We have a lot of devices that cannot use SNI and we want to be able to proxy a lot of HTTP/HTTPS servers. I was thinking we could setup a HAProxy for each URL to connect to initially, and then load ...
0
votes
1answer
96 views

How to proxy traffic by IP using server names/aliases?

We have 5 different server locations each containing around 30 servers each, each server represents a URL and serves both HTTP and HTTPS. They're all identical however provide different content based ...
0
votes
1answer
251 views

Nginx no longer servers uwsgi application behind HAProxy - Looks for static file instead

We implemented our web application using web2py. It consists of several modules offering a REST API at various resources (e.g. /dids, /replicas, ...). The API is used by clients implementing ...
1
vote
2answers
292 views

Struggling with Haproxy 1.5 ACLs using regular expressions and URL Parameters

I am using Haproxy 1.5.3 setup with ssl on the frontend and also sending ssl to the backend servers. the mode is http and using acls to determine stickyness. My test requests are as follows: wget ...
1
vote
1answer
762 views

HAProxy and Intermediate SSL Certificate Issue

We are currently experiencing an issue with verifying a Comodo SSL certificate on an Ubuntu AWS cluster. Browsers are displaying the site/content fine and showing all the relevant certificate ...
1
vote
1answer
180 views

HAproxy 1.5 Trusted CAs

I'm trying to get HAproxy 1.5.x to trust any certificate authority already in the trust store of the machine (/etc/ssl/certs) without having to explicitly specify the individual ca-file root authority ...
1
vote
2answers
204 views

Haproxy backend servers on different interfaces

I have a haproxy server which gets limited to some 60k connections. I think it is because of ephemeral port limit as I have 1:1 connection mapping, so all my outgoing connections go to the same ...
1
vote
0answers
504 views

TPROXY Not working with HAProxy, Ubuntu 14.04

I'm trying to use HAProxy as a fully transparent proxy using TPROXY in Ubuntu 14.04. HAProxy will be setup on the first server with eth0 111.111.250.250 and eth1 10.111.128.134. The single balanced ...
2
votes
1answer
267 views

HAProxy error: Some configuration options require full privileges, so global.uid cannot be changed

After adding the line to /etc/haproxy/haproxy.cfg as part of creating a transparent proxy, source 0.0.0.0 usesrc clientip restarting haproxy starts giving an error ~# service haproxy reload ...
0
votes
1answer
230 views

Using 2 Transparent HAProxy for load balancing

We can configure HAProxy to be a transparent proxy by using the guide here, where one of the steps says ...to put the backend servers in a different subnet to the front end clients and make sure that ...
1
vote
1answer
233 views

How to check if Ubuntu 14.04 Kernel has TPROXY

I'm using Digital Ocean's Ubuntu 14.04 image and needs the kernel to be compiled for TPROXY. Is there a way to check whether the current kernel supports TPROXY?
0
votes
1answer
491 views

Haproxy 1.5.3 / OpenSSL - Creating PEM

I have an HAProxy Server set up with the line: bind *:443 ssl crt /etc/ssl/domain.com/domain.com.pem I have the following files: /etc/ssl/domain.com/domain.com.key ...
0
votes
1answer
640 views

haproxy transparent mode on 14.04

As per my previous question SSHD real-ip behind haproxy - I'm now attempting to setup HAProxy to transparently pass the IPs to the backend services. tproxy modules loaded / and supported in haproxy ...
0
votes
2answers
266 views

SSHD real-ip behind haproxy

I'm trying to setup an ssh over https connection using haproxy. I'm currently looking for a way for SSHD to get the source ip from haproxy, similar to reading X-Forwarded-For or X-Real-IP headers. ...
-1
votes
2answers
529 views

SSH over HTTPS through haproxy

I'm trying to setup an ssh over https connection using haproxy. I haven't found any working examples, so any help would be appreciated! client config; ~$ cat ~/.stunnel/stunnel.conf pid= client=yes ...
0
votes
0answers
77 views

Convert IIS CA Certificate to Ubuntu Haproxy cerificate

Alright, I setup a simple Windows 2012 R2 RDs server aio farm with Web Access, everything works fine internally if I access the server directly (https: // rdsiisserver/RDWeb/). I created a Ubuntu ...
1
vote
0answers
53 views

haproxy : Limit WebSocket payload length

My server is distributing websocket client connections over 4 local websocket servers and I need to prevent these websocket servers to get flooded with big chunks of data. Question: Is it possible ...
1
vote
1answer
31 views

haproxy : Checking for a single header

My server is distributing websocket client connections over 4 local websocket servers. Is it possible to instruct haProxy to accept only WebSocket version 13 (RFC 6455) ? i.e. Verify if ...
-1
votes
1answer
82 views

HAProxy - proxy to webserver via tcp

I have a simple web application, All requests to that application are HTTP based (RESTfull API and standard ajax) I have an haproxy before my tomcat cluster. So now i have clients that http request ...
2
votes
1answer
981 views

Dynamic HAProxy configuration

I try to figure out a way to dynamically manage the loadbalancer configuration. I want to add and remove "service nodes" depending on the overall system load. My research so far revealed "Thalassa" ...
0
votes
0answers
81 views

How to send data via UDP to indexer (Elasticsearch) when haproxy is responsing?

I have some web backends balanced via haproxy. Every backend sends some specific json data in response headers (example of header with data X-JSON-Data: {country:"US", os:"Android"}). This is not ...
0
votes
1answer
184 views

Can HAProxy reconnect a websocket to another backend server transparently?

I'm new to HAProxy so this might have an obvious answer but I wasn't able to find it. Consider this setup: two backend web applications; one HAProxy in front of the web applications; many clients ...
1
vote
1answer
229 views

HAProxy set acl with hosts from file

I'd like to migrate some 100+ sites from one server to another. Current plan is to gradually add an acl for each as they are moved to direct traffic to a new server. Here is a simplified example ...
0
votes
1answer
56 views

Restarting HAProxy with -st flag returns error

I'm restarting HAproxy (on Ubuntu Server x64 14.04) with the following command haproxy -f /etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -st $(cat /var/run/haproxy.pid) However, when actually ...
1
vote
0answers
35 views

is it possible to have reqrep for each server in haproxy loadbalancer?

There are 3 servers in a load balanced HAProxy setup. server serv1 192.168.1.101:8080 check inter 2000 rise 1 fall 1 server serv2 192.168.1.102:8080 check inter 2000 rise 1 fall 1 #The ...
1
vote
1answer
67 views

HAProxy is swapping (Major Faults) when Serving Web Sockets

I've observed some swapping in our HAProxy instance that serves web sockets. The fault rate is low (0.01 major faults/s) currently. We use nbproc mode with one process for the http processing, and 3 ...
0
votes
0answers
13 views

Session automatically unset into HAProxy Server

Its very critical issue. I set session using following code . session_start(); $_SESSION['price'] = 100; After one minute, session automatically destroy or unset. Its happen single time in each ...
0
votes
1answer
50 views

Can haproxy use umlaut-domains?

I am hosting several webpages on one server. For Routing, I am using haproxy. Now, one funny user wants an umlaut-domain "supportbär.de". #haproxy.cfg frontend http-in .. acl is_supportbaer ...
0
votes
2answers
193 views

HAproxy current session is zero

I have some problems on sticky sessions with HAproxy. Haproxy counts every request as a new session. I have a Java servlet that creates the cookie JSESSIONID. If I refresh that page 5 times. The ...
1
vote
0answers
31 views

How to specify alternate errorfiles for a given backend?

We currently use errorfiles to send various 40x/59x error messages to the client on encountering errors. Currently these errorfiles are in html format but I'd like to switch them based on a format ...
0
votes
1answer
598 views

Haproxy sticky session not redirecting to different server when backend fails

I have the following configuration for my haproxy LB: global daemon maxconn 2048 # SSL ca-base /etc/ssl/certs crt-base /etc/ssl/private ssl-default-bind-ciphers ...
3
votes
0answers
438 views

Haproxy using 10GB Memory and 100% CPU with 50k connections

On a Ubuntu 14.04 x64 server, Haproxy uses 3.3 GB of memory and 6.8 GB of swap, while handling 52k connections. The CPU usage also keeps spiking to 100% before most of the traffic was redirected to ...
0
votes
0answers
118 views

Haproxy load balancing TPS lower than single node

I have 2 apache2 servers running in the back end and have a haproxy between them and the clients. If I bench tested anyone of these apache2 severs with ab i get north of a 1500TPS however when I bench ...
1
vote
1answer
120 views

How to Add/Remove New Server behind Haproxy with Minimal Disruption

Haproxy is currently balancing the load between 2 servers, A an B. Clients are connecting to these servers via persistent TCP connections. Question: We want to upgrade from server A to a more ...
1
vote
0answers
134 views

LVS + HA Proxy for L4 to L7 load balancing

Currently we are using HA proxy for our load balancing needs. We are planning to integrate LVS with HA proxy to create a load balancing solution that can take care of L4 to L7 load balancing and HA. ...
1
vote
0answers
67 views

haproxy: explicitly setting the gpc0 value within a frontend or backend section

I have something like this in my haproxy config backend myservice option httplog stick-table type string size 10 expire 10m store gpc0 stick store-request req.hdr(MYHDR) server ...